Re: simple snort pass

[Chris Keladis <chris () cmc optus net au>]

At 02:52 PM 1/12/2004, ICO Staff wrote:

> Hello all. I've read the documentation but I can't get this simple pass
> rule to work. this rule is located in local.rules, which is included and
> being executed.

From the snort(8) man page:

[...]
       -o     Change  the  order  in  which  the rules are applied to packets.
              Instead of being applied in the standard Alert->Pass->Log order,
              this will apply them in Pass->Alert->Log order.
[...]




Cheers,

Chris. 



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users